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Claims 



1. A cryptographic system (1) comprising 
5 first cryptographic algorithm means (2) for enabling cryptographic operations, 
input/output means (3, 4) for receiving input streams and sending output streams 
wherein said input streams are transformed to said output streams by said cryptographic 
operations, 

at least one test plaintext P, and for each test plaintext P; a corresponding test ciphertext 
10 a, 

receiving means (5) for receiving a control stream which is including at least one 
apoptosis key K, , 

checking means (6) for checking whether said at least one test ciphertext G is the 
enciphered image of the corresponding test plaintext Pi under the cryptographic 
15 operation of said first cryptographic algorithm means (2) when using said apoptosis key 
K, 

switching means (7) for stopping said cryptographic operations with said first 
cryptographic algorithm means (2), wherein said stopping by said switching means (7) is 
triggered by said checking means (6). 

20 

2. System as claimed in claim 1, wherein said cryptographic system (1) includes at 
least one second cryptographic algorithm means (8) wherein said switching means (7) 
enables switching to said at least one second cryptographic algorithm means (8). 

25 3. System as claimed in claim 1, wherein 

said receiving means (5) is made for accepting control streams which include at least 
one plaintext P,-, for each plaintext P a corresponding ciphertext C, and a corresponding 
apoptosis key Ki and 

said checking means (6) is made for trying to find a test plaintext P,-and a test ciphertext 
30 Ci equal to said received plaintext P„ wherein said checking is done with said apoptosis 
key of said equal test plaintext P; and said equal test ciphertext G . 

4. System as claimed in claim 1 further comprising a cascaded list of different 
cryptographic algorithm means. 

35 
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5. A method for creating a cryptographic system (1) for carrying out cryptographic 
operations characterized by the steps of 

implementing within said cryptographic system (1) a first cryptographic algorithm 
enabling said cryptographic operations, 

selecting at least one test plaintext Pi and enciphering each test plaintext P,with said 

first cryptographic algorithm and with a corresponding apoptosis key K-, thereby 

generating a corresponding test ciphertext d for each test plaintext P; , 

implementing within said cryptographic system (1) said at least one test plaintext P/and 

for each test plaintext P; said corresponding test ciphertext d, 

implementing within said cryptographic system (1) receiving means (5) for receiving a 

control stream which is including at least one apoptosis key Ki , 

implementing within said cryptographic system (1) checking means (6) for checking 

whether said at least one test ciphertext C, is the enciphered image of the 

corresponding test plaintext P/ under said first cryptographic algorithm when using said 

apoptosis key Ki, 

implementing within said cryptographic system (1) switching means (7) for stopping said 
cryptographic operations with said first cryptographic algorithm, wherein said stopping 
by said switching means (7) is triggered by said checking means (6). 

6. Method as claimed in claim 5, further comprising the step of 
implementing within said cryptographic system (1) at least one second cryptographic 
algorithm for said ciphering operations, and switching by said switching means (7) to 
said at least one second cryptographic algorithm. 

7. Method as claimed in claim 5, further comprising the step of 
publishing said at least one test plaintext P,- and for each test plaintext P; said 
corresponding test ciphertext &. 

8. A method for operating a cryptographic system (1) for carrying out cryptographic 
operations characterized by the steps of 

providing a first cryptographic algorithm for enabling said cryptographic operations, 
receiving input streams and sending output streams wherein said input streams are 
transformed to said output streams by said cryptographic operations, 
receiving a control stream which is including at least one apoptosis key K, , 
checking whether a test ciphertext C, is the enciphered image of a corresponding test 
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plaintext P,- under said first cryptographic algorithm when using said apoptosis key K,, 
stopping said cryptographic operations with said first cryptographic algorithm, if said test 
ciphertext d is the enciphered image of said corresponding test plaintext P,- under said 
first cryptographic algorithm when using said apoptosis key K t . 

9. Method as claimed in claim 8, further comprising the step of 
switching to one of said second cryptographic algorithms for said cryptographic 
operations after said stopping. 

10. Method as claimed in claim 8, wherein 

said receiving of a control stream includes for each apoptosis key K, receiving of a 
plaintext P and a corresponding ciphertext d , and 

said checking includes trying to find a test plaintext P and a test ciphertext d equal to 
said received plaintext P„ and said received ciphertext C, wherein said checking is done 
with said apoptosis key of said equal test plaintext P, and said equal test ciphertext d . 

11. A computer software product for operating a cryptographic system (1) for 
carrying out cryptographic operations, said product is characterized by a 
computer-readable medium in which program instructions are stored, which instructions, 
when read by a computer, enable the computer to 

perform a first cryptographic algorithm that is enabling said cryptographic operations, 
receive input streams and send output streams wherein said input streams are 
transformed to said output streams by said cryptographic operations, 
receive a control stream which is including at least one apoptosis key K-, , 
check whether a test ciphertext d is the enciphered image of a corresponding test 
plaintext P; under said first cryptographic algorithm when using said apoptosis key K„ 
stop said cryptographic operations with said first cryptographic algorithm, if said test 
ciphertext d is the enciphered image of said corresponding test plaintext Pi under said 
first cryptographic algorithm when using said apoptosis key K,. 

12. Computer software product as claimed in claim 10, wherein said instructions, 
when read by a computer, enable the computer to perform at least a second 
cryptographic algorithm and switch to said at least one second cryptographic algorithms 
for said cryptographic operations after said stopping. 
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13. Computer program comprising program code means for performing the steps of 
any of the claims 8 to 10 when said program is run on a computer. 



